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In. t he Clai ms : 



Amend the claims as follows: 

5 

1. (Currently amended) A method for sending messages over 
secure communication links in networks^ comprising: 
providing at least a first terminal i n communication with 
being able to change its method of network access and at lcaat - 
10 one other a seco nd terminal with one or more pos s- iblc 

±ftfee^f ftGdiatc c o mputero b e tween the first t e rminal and the 
other terminal p&Morming network address and/or other 

estah li shing a first secure communication link being 
15 estab l ished between an initial network address of the first 
terminal and tfee a network address of the ^te her second 
terminal, 

the link defining at least the addresses of the two tcrminalo/ 
tcftd t he first terminal performing encapsulation of messages 
20 sent in the first said secure communication link using a 

first encapsulation meth o d, to overcome network address and/or 
other translations made by said intermediate c o mputers on -the 

a-)- the first terminal moving from oaid the initial network 

25 address to a new network address, 

fef the first terminal sending a n encapsulated request message^ 
using the first encapsulation method, fr o m the first terminal 
to the other second terminal to change communication between 
the first terminal and the second terminal from the first 

30 secure communicat i on link to a s econd secure communication 
link extending oaid s ecure connecti o n to be between the new 
networ k address of the first terminal and the network address 
of the second other terminal, the encapsulate d request message 
also ' containing a description of the firs t encapsulation 

35 method performed by the first terminal^ 



rf Attorney Docket No. 290.1075USN 3/20/07 - 3 - 

the second terminal receiving the encapsulated requ est 
mess age, 

the second terminal using the description of the fir s t 
e ncapsulation method to en the b a sis of which descrip t ion th e- 
5 other ter m inal detects- translations of the encapsu lated 
request message performed by said intermediate computers 
disp osed en route between the first terminal and the second 
terminal , 

■ef tire e-feh-e-e second terminal responding to the first terminal 
10 with a reply message , the reply message having with a 

description about detect e_d translations made by said pos - siblc 
intermediate computers disposed between the new network 
address of the first terminal and the © thcr network address of 
the second terminal and/or encapsulation methods supported by 
15 the e the g second terminal, 

the f irst terminal receiving the reply message and the 
descrip t ion about translation m ad e by intermediate computers 
and e ncapsulatio n methods supported by the second terminal, 
the first terminal selecting an encapsulation method to 
2 0 encapsulate a message based on the description of the reply 
message, and 

eV)- th e reafter the first terminal sending the encapsulated 
message from the first - terminal to the oth&a ? second terminal 
by using -t he information sent with s - aid reply . 

25 

2. (Currently amended) The method of claim 1 wherein the 
method further comprises the second terminal detecting address 
tran s lations performed by the intermediate computers and 
including a description of translated source and/or 
30 destination addresses in description of the reply message 

include oomkg and/or d OD- tination addresses on-fehc basis of 
which the occ on d receiving t erminal det ec ts addr eos 
tefaes- lationo performed by int e rmediate computers . 

35 3. (Currently amended) The method of claim 1 wherein the 
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description of the reply message has eJ-^fee -mcoaago includes 
information about encapsulation protocols, as well as source 
and destination transmission control proto col JTCP_)_ or user 
d atagram protocol JUDP_)_ ports. 

5 

4. (Currently amended) The method of claim 3 wherein the 
meth od further c omprises performing network address 
transl ation _(NAT| traversal is per teased by UDP encapsulation r 
or TCP encapsulation and/ o r by another encapsulation . 

10 

5. (Currently amended) The method of claim 1 wherein a#feee 
rec ei ving- of th e goquont mea o ago by oai d other t er minal ocnt 
in stop c) 1 tho other t e rminal dctsr - m i nco by the method 
further comprises the second termina l examining the 

15 encapsulated request messa ge to determin er- which translations 
and/cr encapsulations are required in *ke traffic between the 
first terminal and the other second terminal, 

6. (Currently amended) The method of claim 5 wherein the reply 
2 0 message of atop c) contains information about the second 

secur e communication link to be used between the new network 
address of the first terminal and said otheg the second 
terminal . 

25 1. (Currently amended) The method of claim 6 wherein the 
information about the second secure communication link 
includes information about whether network address translation 
J_NATJ_ traversal jis and/or oth er encapsulation - should be used. 

30 8. (Currently amended) The method of claim 1 wherein the 
method further comprises in stop c) the first terminal 
compares comparing the description* of the request message 
with the description of th e respective reply messages- and 
sends sending a-li subsequent messages from fefain the new 

35 network address based on the comparison of the descriptions 
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regarding which en the ba - sio of the comparioos tolling what 
encapsulations, protocols and rules to use should be u s ed in 



9. (Currently amended) The method of claim 1 wherein the first 
secure communication link is formed by using an feke Internet 
security protoco l IPSec protoc o l . 

10. (Currently amended) The method of claim 9 wherein the 
reply message in stop d) is sent by using IPSec and a network 
address translation j_NAT_)_ traversal that is updated to the new 
network address of the first terminal. 

11. (Currently amended) The method of claim 1 wherein the 
reply message in otop d) is sent without a network address 
translation j_NATj_ traversal in the first secure communication 
link when the description of the reply message corresponds to 
the d escription of the request message tho ' doocripti-onn 




12. (Currently amended) The method of claim 1 wherein the 
method further comprises provid ing a the secure connection 
with i-5- an Internet security protocol J_IPSec]_ security 
assoc i ation ±SA)_. 

13. (Currently amended) The method of claim 12 wherein the 
metho d further comprises using a key exchange mechanism that 
passes through a network address translation J_NAT) m do uocd 
when forming the IPSec SA. 

14. (Currently amended) The method of claim 12 wherein -feke a 
key exchange mechanis m protoc ol- is a n Internet key exchange 
(IKE_)_ when ^ehe- a network address translation _(_NAT]_ device 
supports a user datagram protocol J_UDP| protee e^. 
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15. (Currently amended) The method of claim 14 wherein a- the 
key exchange mechanism is used when forming the IPSec SA and 
wherein several traversal mechanisms are used simultaneously 
to increase fcfce a chance that at least one of the traversal 

5 mech anisms passes them poos through the NAT device. 

16. (Previously presented) The method of claim 12 wherein a key 
exchange mechanism is performed when forming the IPSec SA in 
which a negotiation process is used to agree on protocols to 

10 be used in the further communication. 

17. (Currently amended) The method of claim 12 wherein an 
encapsulation protocol is used in the a key exchange mechanism 
when forming the IPSec SA. 

15 

18. (Currently amended) The method of claim 1 wherein the 
network address of the other second terminal is ^fcfte an end 
destination address of messages sent from the first terminalr 
in whiofo and using case transport or tunnel mode id uocd in 

2 0 the f irst and second secure -2*&ee communication links . 

19. (Currently amended) The method of claim 1 wherein a ^febe 
destination address of the message is 'fetee a network address of 
a host which is not the oth er second terminal 7 — in whi c h case 

25 and using tunnel mode or transport mode together with a 

tunneling protocol is uocd in the IPSea the first and second 
secur e communication links. 

20. (Currently amended) The method of claim 1 wherein several 
30 request messages of step b - )- are sent, each request messag e 

being processed using a different traversal mechanis m, w h oro 
after the other terminal indica ' t eo and the second terminal 
indicating in the reply message which encapsulation methods is 
to be used in the fur t her - communicati - & a. 
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